Pkgcheck

Latest version: v0.10.31

Safety actively analyzes 681775 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 13

0.10.31

-----------------------------

- fix compatibility with tree-sitter 0.23 (Arthur Zamarin)

- bash completion: improve path handling (Arthur Zamarin)

**New Checks:**

- OldPackageNameDep: check for dependency using previously moved package's name
(Arthur Zamarin, 659, 694)

- BadDependency: catch ``:=`` slot operator in PDEPEND (Arthur Zamarin, 660)

**Checks Updates:**

- DistutilsNonPEP517Build: handle false positives when defined by eclass
(Arthur Zamarin)

- PythonCompatCheck: add whitelist for backports (Arthur Zamarin)

- EmptyGlobalAssignment: ignore empty KEYWORDS (Arthur Zamarin, 695)

-----------------------------

0.10.30

-----------------------------

- pyproject: fix python compat with snakeoil (Lucio Sauer, 678)

- NetAddon: fix ftp call with ``--timeout 0`` (Lucio Sauer, 678)

- NewerEAPIAvailable: handle better when no eclasses EAPI (Arthur Zamarin, 679)

- fix compatibility with newest version of tree-sitter (Arthur Zamarin)

-----------------------------

0.10.29

-----------------------------

- drop bundling of tree-sitter-bash (Arthur Zamarin)

- use flit as build backend for pkgcheck (Arthur Zamarin)

- PkgBadlyFormedXml: change level to error instead of a warning (Arthur Zamarin,
668)

- git addon: support user global gitignore (Arthur Zamarin, 671, 672)

**New checks:**

- NewerEAPIAvailable: committing new ebuilds with old EAPI (Arthur Zamarin, 666)

-----------------------------

0.10.28

-----------------------------

- docs: Add intersphinx linkages (Brian Harring, 658)

**New checks:**

- VariableOrderWrong: Enforce skel.ebuild variable order (Anthony Ryan, 645)

**Fixed bugs:**

- git: fix issues with no-copies (Arthur Zamarin, Sam James, 663, 664)

- addons.net: suppress urllib3 import warnings (Anna "CyberTailor", 661)

-----------------------------

0.10.27

-----------------------------

- Dockerfile: introduce ``pkgcheck`` docker, created on release, which should
provide stable and tested environment to run, for example in CI (Arthur
Zamarin)

- Test pkgcheck with Python 3.12 and 3.13 (Sam James, 567)

**New checks:**

- UnstatedIuse: check for unstated IUSE in "?" dependencies (Arthur Zamarin)

- SandboxCallCheck: check for invalid sandbox funciton calls (Arthur Zamarin,
644)

- OldPackageName: check for package named after old package name (Arthur
Zamarin, 650)

- RepositoryCategories: check for fundamental category issues in the repository
layout (Brian Harring, 656)

**Fixed bugs:**

- pyproject.toml: add runtime dependency on setuptools for Python 3.12 (Arthur
Zamarin)

- MissingInherits: add some special variables to exclude list (Arthur Zamarin)

- UnusedInherits: add whitelist for weak usage by another eclass, for example
conditional automagic inherit (Arthur Zamarin)

- GitCommitsCheck: fix tarfile Python 3.12 compatibility (Alfred Wingate, 638)

- MissingRemoteId: improve gitlab matching rules (Alfred Wingate, 636, 637)

- OutdatedProfilePackage: don't warn when version was removed not long ago
(Arthur Zamarin)

- DeprecatedDep: fix mishandling of slotted deprecates (Arthur Zamarin, 642)

- DependencyMoved: show better error for dependency on pkgmove (Arthur Zamarin,
649)

- compatibilty: remove reliance on ``repo.category_dirs`` (Brian Harring, 656)

-----------------------------

0.10.26

-----------------------------

- tree-sitter-bash: use and bundle the latest version of the bash grammar. This
version is capable to parse all the bash code that was used in gentoo
repository, meaning various false positives or parsing errors were fixed.
(Arthur Zamarin)

- git addon: pass options to disable finding copies (Sam James, 618)

- git addon: add helping message on failure of git remote setup (Arthur
Zamarin, 608)

**New checks:**

- VariableScopeCheck: add check for usage of prohibited variables in global
scope (Arthur Zamarin, 607)

- VariableScopeCheck: BROOT is allowed also in ``pkg_{pre,post}{inst,rm}``
(Ulrich Müller, 609)

- GlobDistdir: check for unsafe filename expansion with ``${DISTDIR}`` (Arthur
Zamarin, 610)

- EclassManualDepsCheck: check for missing manual deps for specific eclasses
(Arthur Zamarin, 616)

- UnstableSrcUri: check for known unstable ``SRC_URI`` sources (Arthur Zamarin,
599)

- network: add codeberg remote-id (Thomas Bracht Laumann Jespersen, 620)

- EmptyGlobalAssignment: check for empty global assignments (Arthur Zamarin,
629)

- SelfAssignment: check for global scope self assignments (Arthur Zamarin, 629)

- BannedPhaseCall: detect calls of phase functions directly in ebuilds (Arthur
Zamarin, 627)

- VariableShadowed: check to detect shadowed variable assignments (Arthur
Zamarin, 623)

- DuplicateFunctionDefinition: check for duplicate global functions (Arthur
Zamarin, 624)

- BannedEapiCommand: also check for ``has_version --host-root`` and
``best_version --host-root`` in EAPI>=7 (Arthur Zamarin, 630)

- BannedEapiCommand: add some extra user and group commands (Arthur Zamarin)

**Fixed bugs:**

- RedundantLongDescription: lower too short threshold (Arthur Zamarin, 614)

- tests.test_pkgcheck_scan: fix issues with xdist testing (Arthur Zamarin)

-----------------------------

Page 1 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.